CVE-2026-49292

Kiwi TCMS is an open source test management system. Prior to 16.0, the unauthenticated /init-db/ page handled by InitDBView in tcms/core/views.py remains reachable after initial setup and proxies repeated requests to Kiwi/manage.py migrate. The migration command is reentrant, so repeated access...

DEBIAN-CVE-2026-90412

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix return status of RMI log page on allocation failure nvmetexecutegetlogpagermi leaves 'status' holding NVMESCSUCCESS set by the successful nvmetreqfindns call when the kzalloc for the log buffer fails. It then jumps to...

CVE-2026-90412 nvmet: fix return status of RMI log page on allocation failure

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix return status of RMI log page on allocation failure nvmetexecutegetlogpagermi leaves 'status' holding NVMESCSUCCESS set by the successful nvmetreqfindns call when the kzalloc for the log buffer fails. It then jumps to...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fixed the crash that occurred when using WRITESAME without a data buffer. In the newer versions of the SBC specifications, there’s a NDOB bit that indicates that there is no data buffer being written. If this bit is...

Astra Linux – Vulnerability in connman

A issue was discovered in the DNS proxy of Connman through version 1.40. The TCP server reply implementation creates an infinite loop if no data is received...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: drm/amdkfd: Ensure that the list is non-empty before using listfirstentry in kfdtopology.c. Before using listfirstentry, make sure that the list is not empty; if the list is empty, return -ENODATA. The following issues have al...

MINI-VHQP-FHC7-QV86

Bulletin has no description...

CVE-2026-67567

creationtimestamp| type| source ---|---|--- 2026-08-20 20:56:39+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117129831985236365 2026-08-20 21:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtk6wllm7x25 2026-08-20 22:01:52+00:00| seen|...

MINI-P78P-W422-Q2HW

Bulletin has no description...

CVE-2026-63038

creationtimestamp| type| source ---|---|--- 2026-08-20 16:39:55+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtjopqokh22y 2026-08-20 18:26:21+00:00| seen| https://infosec.exchange/ap/users/116797276219291526/statuses/117128823263544759...

MINI-8J7W-9MRG-3795

Bulletin has no description...

MINI-24PC-7G83-5X82

Bulletin has no description...

MINI-47MR-4W8M-X986

Bulletin has no description...

MINI-69F5-VWX3-G3P5

Bulletin has no description...

MINI-8M95-MCH2-6RHP

Bulletin has no description...

MINI-2X7V-8C48-J99F

Bulletin has no description...

MINI-5M9J-XJQ2-5G58

Bulletin has no description...

MINI-JHQ5-957F-PGG2

Bulletin has no description...

CVE-2026-71112

creationtimestamp| type| source ---|---|--- 2026-08-19 13:35:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtwcyy4y2h 2026-08-19 17:51:25+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70906

Vulnerability in Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 25.0.4 and 26.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this...